Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier: 4WIlWVvQhpWCALhtqO88ny1KSD+pj3iiLjXZ8798XiI=
Subject key identifier: ED:81:B4:AD:54:9F:FF:12:A3:3D:F7:21:94:3F:4C:3B:E2:AD:B5:0E
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer: /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial: 019676E80D258F5B28DA3DD976D41E8A43B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number: 12B1
Signing time: Sun 27 Apr 2025 11:00:41 +0000
Manifest this update: Sun 27 Apr 2025 11:00:41 +0000
Manifest next update: Mon 28 Apr 2025 11:00:41 +0000
Files and hashes: 1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: fb+6gnWY6i3jQJrBVopylf+4Ylc3dyTCiwvUj7dfDYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:0d:25:8f:5b:28:da:3d:d9:76:d4:1e:8a:43:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Validity
Not Before: Apr 27 11:00:41 2025 GMT
Not After : Apr 28 11:00:41 2025 GMT
Subject: CN=ed81b4ad549fff12a33df721943f4c3be2adb50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:93:4c:61:16:c4:d9:0e:8e:41:c1:ea:62:
61:3e:2a:15:f3:b9:33:7e:b1:07:f8:0d:f6:52:46:
77:32:c3:1f:bd:c2:f5:b5:88:7f:4a:6b:d4:ac:c1:
47:80:23:69:bc:34:22:fa:a0:92:33:9d:77:5d:18:
99:1d:87:3f:35:01:4c:ea:a3:18:d7:8e:c0:e1:3e:
0d:8e:78:f8:b9:1b:07:6a:6f:04:22:22:3e:3b:ac:
16:a9:5a:d6:d1:2f:67:e1:d5:62:62:a5:b0:16:94:
c5:57:e4:0a:73:67:4c:f8:d1:32:66:3f:84:ed:8e:
69:49:b2:01:dc:3d:58:a5:0e:dd:e5:01:cd:30:d3:
60:2c:51:7a:c0:07:e1:02:8c:c4:93:29:69:ae:be:
6b:8b:8f:50:20:d0:cf:0f:e7:6c:46:81:37:85:2b:
8e:00:c8:51:76:3b:0b:47:c0:7e:48:f0:74:7f:5f:
07:f1:7d:bb:3d:76:7a:2b:25:13:d8:db:a5:8c:b7:
14:38:05:fe:2f:b7:f3:15:f4:9a:59:91:3e:d8:78:
df:30:59:a6:1c:57:75:7b:01:17:43:ce:9d:1d:cb:
0f:3d:90:b4:23:3d:50:bf:1d:75:08:71:b5:e3:6e:
af:5d:6e:8d:a5:a5:8a:f4:d0:cd:b2:a1:56:c2:d2:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:81:B4:AD:54:9F:FF:12:A3:3D:F7:21:94:3F:4C:3B:E2:AD:B5:0E
X509v3 Authority Key Identifier:
keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e2:7a:aa:fc:37:d1:7d:98:88:28:13:26:e9:66:cf:2f:c7:
39:b3:1f:a2:f7:d7:c3:eb:ff:85:03:25:27:e2:b3:87:da:7c:
91:0f:3a:f7:a4:db:57:de:77:23:6d:6b:cb:b2:1a:a9:c4:9d:
1e:66:76:37:70:a7:c9:6e:a8:b9:ad:b0:30:fe:b5:83:37:87:
e6:44:24:8d:6c:e5:b2:79:e5:d4:b7:2b:37:58:a4:9e:eb:dd:
da:04:1e:a2:78:5c:ad:40:b0:49:77:bc:2d:d6:39:40:b3:d9:
3d:89:42:58:00:69:00:63:23:0f:f0:4d:1f:74:c5:80:c0:d8:
77:d5:f4:9f:72:f3:cc:47:5b:b8:51:56:b3:a7:e3:07:8d:a8:
b9:03:08:c2:3c:ac:b3:21:0c:01:a9:3c:e3:f8:42:2a:87:29:
7a:6d:52:ed:79:ce:19:c3:95:a2:70:59:f4:5c:66:02:42:4e:
f1:f8:c3:e2:82:de:6c:1e:54:6c:c4:ac:75:02:04:d6:23:f9:
1b:57:31:34:f8:26:80:aa:74:42:60:d5:8e:71:11:e5:bf:62:
a7:09:cf:88:b4:00:c4:5f:f0:1e:51:e3:ad:8e:8f:2a:83:f0:
b9:fd:a2:a4:c1:09:aa:4a:2d:62:fc:22:57:9e:44:ca:ba:48:
92:16:34:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:39:50 2025 by rpki-client